Has anyone successfully implemented AD LDS on a 2008 box? Mroe specifically, have you run into any problems using the Schema Editor on the 9.1.0.5 environment running WebSphere 7.0, fix pack 7? I have run into an issue that I am unable to resolve on my own.
Here's what I got:
Here's the problem. Using the Lawson Schema Editor, I am able to define attributes and save them to the local LDAP repository on the server. However, whenever I try to add that attribute (e.g., Region) to a resource (e.g., Person), I get a "500 Internal Server Error" and I am forced to close the Schema Editor. No errors are generated in the Lawson logs. However, if I review the Websphere logs for my application server, I find several java errors get generated, beginning with the following:
com.ibm.ws.webcontainer.servlet.ServletWrapper service SRVE0068E: Uncaught exception created in one of the service methods of the servlet LsGate in application LAWAPPS-lawsec. Exception created : javax.servlet.ServletException: Got exception while processing request. Nested Exception is com.lawson.lawsec.authen.SecurityAuthenException: Got exception while processing request Stack Trace : com.lawson.lawsec.authen.SecurityAuthenException: Got exception while processing request
I'm guessing it's a security or authentication issue of some kind, but I don't know. I've gone through this environment install three times on this box thinking that I've made some sort of error along the way, but everything I can see shows a correct installation. So I have to believe the problem is elsewhere. I've exhausted everything I can think of and Lawson won't help since they beleive it's an environment installation issue.
Can any gurus out there help?
My developer lawson servers:
Windows 2008 Enterprise x64 WebSphere 7.0 FP7 Windows 2008 ADLDS ENV: 9.0.1.5.353 I have no problem defining attribute and adding attribute to resources via RM Schema Editor. Are you using IIS?
The 500 error indicates it's your IBM HTTP server configuration issue. The HTTP server barks at the requested transaction. I remember I ran into some of those issues with the websphere plugin configuration settings with Windows 2008.
Another thing you may want to check is the file security for your %lawdir%\system. Rerun permsmaint and check your %lawdir$\system folder security. Does the account you use in Schema editor has "F" access to this folder? You can check the %lawdir%\system\ladirs.cfg to verify. The schema editor account should be in the lawdev user group also.
Jimmy - First, thanks for your assistance. I do appreciate it as I feel Lawson has left me out in the cold on this one. I did run into some issues trying to get my http.conf file set correctly. I believe it's good to go now as everything else works (Portal, Employee / Manager Self-Service, Design Studio, Security Administrator, etc.). If you'd be willing to review my file or compare it to yours, I'd be more than happy to send it to you. As far as the permmaint utility, to my knowledge it has never been run / executed on any of our environments up until now. We've just made sure the user group defined for Lawson users has full access to %LAWDIR% and %GENDIR%. In the case of my LDAP admin account, it's been added to the 'Administrators' group for the server and has full access. Can you provide any other suggestions or things I can look at?
Are you using Windows 2008 SP2 or Windows 2008 R2? I could not get Lawson environment running right on Windows 2008 R2.